Information System Security Officer (ISSO)

General Dynamics Information Technology•USA FL MacDill AFB - 7701 Tampa Point Blvd (FLC097), FL

2d•$93,500 - $126,500•Onsite

About The Position

Performs cybersecurity activities for a large program, coordinating with government program staff, the USAF, and other government agencies on program policy, standards, operating procedures, and audits. Supports government ISSMs with authorization documentation and processes, including ATOs, ATCs, IATTs, and POA&Ms. Develops and executes security test and evaluation plans, produces assessment and authorization materials, reviews architecture and security impact documentation, and supports DoW IT authorization under the Risk Management Framework (RMF). The role manages security controls for system build processes, supports compliance with hosting facility authorizations, and develops and enforces cybersecurity and vulnerability management practices. It conducts network and system audits and vulnerability assessments across Linux, Windows, Cisco, Juniper, VMware, and related technologies; implements continuous monitoring; communicates threat and risk information; evaluates change requests; and supports audits, inspections, and remediation. The position also provides work leadership to less-experienced staff, maintains relevant technical knowledge, and processes program ITSM tickets. The work is typically performed onsite at client locations, including MacDill AFB in Florida. It may require some physical effort handling light materials, boxes, or equipment. The position requires a current Top Secret/SCI clearance, U.S. citizenship, and at least five years of related experience.

Requirements

At least 5 years of IT experience, including at least 5 years of ISSO experience.
Working knowledge of the DoW Risk Management Framework (RMF).
Must meet DoW 8750 requirements and be eligible for IAM Level II.
Must obtain ITIL V4 Foundation within six months of hire.
Must possess and maintain a Top Secret/SCI security clearance.
U.S. citizenship is required.
BA/BS degree or an equivalent combination of education, technical training, or work or military experience.
Ability to work in a team-oriented, collaborative environment.
Ability to work efficiently in a fast-paced environment, multitask, and maintain high-quality work.
Strong organization, prioritization, and autonomous work skills.
Excellent verbal and written communication skills.
Attention to detail and presentation.
Results-driven, efficient, energetic, and motivated.
High degree of intelligence, competence, maturity, adaptability, resilience, integrity, and initiative.
Work may require some physical effort handling light materials, boxes, or equipment.

Responsibilities

Perform cybersecurity activities for a large program and coordinate with government program staff, the USAF, and other government agencies on program policy, standards, operating procedures, and audits.
Support government ISSMs in developing and staffing documentation for ATOs, ATCs, IATTs, POA&Ms, and related authorization processes.
Assist in developing and executing required Security Test and Evaluation (ST&E) plans.
Produce and provide assessment and authorization materials for DoW IT packages, including engineering project briefs, outstanding RMF actions, expiring authorizations, and resolution of issues affecting packages.
Review architecture documentation, security impact analyses, and risk mitigation or acceptance to support RMF authorization of DoW IT.
Provide security design management control of build processes for servers, services, and endpoints.
Comply with hosting facility ATO requirements where program information systems depend on them.
Develop, implement, and enforce cybersecurity and vulnerability management practices.
Conduct network and system vulnerability audits using STIGs, DISA SCAP, ACAS, ESS Policy Auditor, and related tools across Linux, Windows, Cisco, Juniper, VMware, and other technologies.
Implement continuous monitoring by creating, tracking, reviewing, and closing POA&Ms and risk acceptances, and assist with identifying solutions for remediation.
Communicate tactical and strategic threat information to government leaders, Cybersecurity Operations, and assessment and authorization staff to support risk decisions and threat mitigation.
Carry out the DoW RMF in accordance with DoW 8510 by assessing information system security posture, validating security controls, and coordinating security testing.
Coordinate with AFRL, the USAF, and other organizations for audits and inspections, and provide documentation for SAVs, ST&Es, and CCRIs.
Evaluate firewall, systems, and network change requests and assess organizational risk.
Protect network, system, and application integrity through technical enforcement of organizational security policies and vulnerability-scanning-device monitoring.
Provide guidance and work leadership to less-experienced technical staff.
Maintain current knowledge of relevant technology as assigned.
Process program support tickets using the accepted ITSM system.